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Please replace the paragraph at page 1, lines 4-11 with the following amended paragraph: 
The present invention is related to the following commonly-assigned U. S. Patents, all of 

which were filed concurrently herewith: U. S. (serial number 09/761,906 09 / - ), 

entitled "Secure Integrated Device with Secure, Dynamically-Selectable Capabilities"; U. S. 

(serial number 09/764,844 09 / ) , entitled " Smart Card with Integrated 

Biometric Sensor"; U. S. (serial number 09/76 K899 09/ ) , entitled "Technique 

for Establishing Provable Chain of Evidence"; U. S. (serial number 09/765,127 

09/ entitled "Technique for Improved Audio Compression"; and U. S. (serial 

number 09/764,541 09 / ) , entitled "Technique for Digitally Notarizing a Collection of 

Data Streams". 

Please replace the paragraph at page 2, lines 7-20 with the following amended paragraph: 
Pervasive devices, sometimes referred to as pervasive computing devices, are becoming 
increasingly popular, and their functionality (in terms of communication and processing 
capabilities) is increasing rapidly as well. Pervasive devices are often quite different from the 
devices an end-user might use in an office setting, such as a desktop computer. Typically, a 
pervasive device is small, lightweight, and may have a relatively limited amount of storage. 
Example devices include: pagers; cellular phones, which may optionally be enabled for 
communicating with the Internet or World Wide Web ("Web"); foreign language translation 
devices; electronic address book devices; wearable computing devices; devices mounted in a 
vehicle, such as an on-board navigation system; computing devices adapted to use in the home, 
such as an intelligent sensor built into a kitchen appliance; mobile computers; personal digital 
assistants, or "PDAs"; handheld computers such as the PALMPILOT brand handheld computer 
PalmPilot™ from 3Com Corporation and the WORKPAD® brand handheld computer 
WorkPad® from the International Business Machines Corporations ("IBM"); etc. ("PalmPilot" is 
a trad e mark of 3Com Corporation, and "WorkPad" is a r e gist e r e d trad e mark of IBM.) 

Please replace the paragraph at page 4, lines 3-16 with the following paragraph: 

Let us review the state of the prior art in the field of pervasive computing, as represented 
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by a mobile professional equipped with a collection of the latest generation of specialized 
personal devices. She may have a cellular telephone, a two-way pager, a "smart" credit card 
(also known as a "smart card"), a "smart" employee badge used to access secure areas, a PDA, a 
digital still camera, a digital video camera, a dictation recorder with voice recognition capability, 
an MP3 music player, a remote control key-chain for access to an automobile, a second remote 
control key-chain for access to a garage, a global positioning system (GPS) navigation aid and 
map pad, a weather-alert radio, and a personal health alert fob to summon medical aid - all of 
which may be capable of interacting wirelessly with one another, perhaps via short-range radio 
technology such as Bluetooth. ("Bluetooth" is a standardized technology that enables devices 
containing a low-powered radio module to be automatically detected upon coming into radio 
proximity with one or more other similarly-equipped devices. Devices incorporating this 
technique are referred to as "Bluetooth-enabled" devices. A standard defining the Bluetooth 
techniques may be found on the Web at location www.bluetooth.com. 
http://www.bluetooth.com. ) 

Please replace the paragraph at page 8, lines 8-20 with the following paragraph: 

U.S. Pat. [[ 11 6,772,331 , entitled "Method and Apparatus for Exclusively Pairing 

Wireless Devices", (Ser. No. 09/316,686, filed May 21, 1999) taught a technique for establishing 
secure trusted relationships between devices in a Bluetooth network using special-purpose 
hardware, along with software on each device. The special-purpose hardware comprises, for 
example, a protected memory for storing a digital signature, where this memory is physically 
attached to the radio transmitter of each device; a display screen on at least one device capable of 
showing a media access control (MAC) address of the device; and an input button or other 
comparable device on at least one device for the user to indicate his assent to a trust relationship. 
While the disclosed technique provides security improvements for networking a collection of 
devices, there is a significant cost involved. Even if such an investment were made, the overall 
business process would remain unsecure against certain types of attacks. Furthermore, the 
disclosed technique cannot be applied to prior art smart credit cards, which have neither a display 
nor a button for indicating trust. 
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Please replace the paragraph at page 28, line 12 to page 29. line 7 with the following 
amended paragraph: 

The security core now preferably computes a hash of this data block (Block 330). The 
security core then signs this hashed data block (Block 340) using the security core's private key. 
(The security core's private key is preferably securely stored in protected key storage, as shown 
at element 156 of Fig. 1 and as previously discussed.) Another data structure is then preferably 
created by the security core, where this data structure contains the original data block from Block 
320 (shown as element 315) as well as the signed hash thereof which was computed in Blocks 
330 and 340. This new data structure is then encoded (Block 350) as another data stream, 
referred to in this example as "S4", and this additional data stream is added to the collection as a 
notarization. In the preferred embodiments, the data streams SI through S3 are SL-Packetized 
Streams within an MPEG-4 FlexMux stream, the timestamps Tl and T2 are encoded at the 
appropriate positions within the data streams SI through S3 using MPEG-4 synchronization 
timestamp methodology, and the signed hash stream S4 is an H n+1" MPEG SL-Packetized 
Stream that is also timestamped so that it can be correlated with streams SI through S3. The 
notarized collection of data streams SI through S4 may then be sent to a receiver, preferably as a 
FlexMux Stream over a TransMux Channel (Alternatively, the notarized collection may simply 
be stored for future use.) An overview of the MPEG-4 standard, provided by the international 
standards working group responsible for its definition, can be found on the Internet at location 
www.cselt.it/mpeg/standards/mpeg-4/mpeg-4.htm. http://www.cs e lt.it/mp e g/standards/mp e g 
4/mp e g 4.htm. 

Please replace the abstract with the following amended abstract: 
A m e thod Methods , systems, and computer program products, are provided for 
improving the security of transactions performed using smart cards, and also a card with an 
integrated biometric sensor. Th e disclos e d t e chniqu e s also improv e th e s e curity of transactions 
carri e d out with d e vic e s such as p e rsonal or "p e rvasiv e computing" d e vic e s. Biometric sensors 
are used for obtaining identifying information from users of smart cards. In on e asp e ct, this may 
b e don e by s e cur e ly attaching a A smart card reader and a biometric sensor may be securely 
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attached to a security core,, which authenticates these devices using public key infrastructure 
techniques, and which securely controls information exchanged with these devices. In anoth e r 
aspect, this is don e by int e grating a biom e tric s e nsor with a smart card . 



